Email: 532315 Autolearn: 0 AvgScore: 4.05 AvgScanTime: 1.31 sec Spam: 165051 Autolearn: 0 AvgScore: 13.65 AvgScanTime: 1.42 sec Ham: 367264 Autolearn: 0 AvgScore: -0.27 AvgScanTime: 1.26 sec Time Spent Running SA: 194.07 hours Time Spent Processing Spam: 65.33 hours Time Spent Processing Ham: 128.74 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 160310 89.62 97.13 86.24 2 DKIM_SIGNED 150989 78.51 91.48 72.68 3 XM_DK_Pass 145562 76.52 88.19 71.28 4 DKIM_VALID 142966 75.38 86.62 70.33 5 XM_B_Unicode 142146 75.22 86.12 70.31 6 T_SCC_BODY_TEXT_LINE 134560 82.83 81.53 83.41 7 RELAYCOUNTRY_US 128076 78.73 77.60 79.23 8 XMListUnsubscribeExists 121665 57.05 73.71 49.56 9 XM_B_SpammyWords 121032 53.75 73.33 44.96 10 DCC_CHECK 119877 44.97 72.63 32.54 11 DKIM_VALID_AU 103065 58.07 62.44 56.10 12 XM_B_Unicode3 78242 42.07 47.40 39.67 13 XM_DK_Undo_02 76940 17.81 46.62 4.86 14 XM_B_SpammyWords2 70574 26.87 42.76 19.72 15 TR_MAX_INTL_RELAY 69435 17.08 42.07 5.85 16 LOC_TINY_FONT_1 66855 29.65 40.51 24.77 17 BAYES_50 62418 53.57 37.82 60.65 18 HTML_FONT_LOW_CONTRAST 60727 30.07 36.79 27.05 19 TR_XM_DKIM_Undo 59764 12.57 36.21 1.95 20 BAYES_99 58771 13.62 35.61 3.74 21 MIME_HTML_ONLY 56810 24.42 34.42 19.93 22 DKIM_VALID_EF 55099 29.05 33.38 27.11 23 FVGT_m_MULTI_ODD 53153 27.55 32.20 25.46 24 T_KAM_HTML_FONT_INVALID 51538 23.75 31.23 20.38 25 BAYES_999 45316 10.51 27.46 2.89 26 DCC_CHECK_NEGATIVE 45156 54.99 27.36 67.41 27 TR_XM_DK_Unsub 42069 16.91 25.49 13.06 28 TR_DCC_Bayes_99 40606 8.38 24.60 1.09 29 RCVD_IN_MSPIKE_H2 40465 23.19 24.52 22.60 30 XMSubLong 37579 22.37 22.77 22.19 31 RELAYCOUNTRY_META 37247 9.59 22.57 3.75 32 T_TM2_M_HEADER_IN_MSG 37208 26.98 22.54 28.98 33 TR_XM_SpammyRelay 31527 7.41 19.10 2.15 34 XM_Multi_Part_URI 30617 14.90 18.55 13.26 35 RCVD_IN_BL_SPAMCOP_NET 25140 5.19 15.23 0.68 36 XM_B_Unsub 24871 10.16 15.07 7.95 37 TR_XM_BayesUnsub 24067 8.86 14.58 6.29 38 UNPARSEABLE_RELAY 23978 11.17 14.53 9.66 39 TR_XM_SpammyWords2 23428 4.62 14.19 0.31 40 RELAYCOUNTRY_CA 23047 5.06 13.96 1.06 41 BOTNET_IPINHOSTNAME 22793 7.10 13.81 4.09 42 XM_B_SpammyWords3 22167 6.88 13.43 3.94 43 LOTS_OF_MONEY 21635 9.61 13.11 8.03 44 TR_XM_SPAMCOP 21028 4.15 12.74 0.29 45 RCVD_IN_MSPIKE_WL 19217 7.80 11.64 6.08 46 RCVD_IN_MSPIKE_H3 19217 7.80 11.64 6.08 47 TR_XM_SpammyWords4 19089 7.80 11.57 6.10 48 XM_Evil_Numbers_Gen 15816 8.02 9.58 7.32 49 XM_Body_Dirty_Words 15287 5.69 9.26 4.09 50 BOTNET 14621 3.61 8.86 1.25 51 BAYES_80 14508 5.73 8.79 4.36 52 FSL_BULK_SIG 14118 4.61 8.55 2.83 53 BAYES_60 13103 8.87 7.94 9.29 54 TR_XM_UnparsRelay 12533 3.32 7.59 1.40 55 XMBody_17 11181 2.44 6.77 0.49 56 LotsOfNums_01 11161 8.09 6.76 8.69 57 HTML_IMAGE_RATIO_02 11039 5.49 6.69 4.95 58 XM_UncommonTLD01 10709 4.50 6.49 3.61 59 BAYES_95 10385 3.40 6.29 2.10 60 MPART_ALT_DIFF 9702 4.55 5.88 3.95 61 XMSubMetaSx_00 9594 4.11 5.81 3.35 62 HTML_IMAGE_RATIO_04 9368 4.45 5.68 3.89 63 UNTRUSTED_Relay 9063 2.61 5.49 1.32 64 TooManyTo_001 8764 7.81 5.31 8.94 65 XM_H_Long_From01 8596 5.18 5.21 5.17 66 T_FILL_THIS_FORM_SHORT 8192 2.13 4.96 0.86 67 XM_OfRef6 8096 2.51 4.91 1.44 68 DKIM_INVALID 8023 3.13 4.86 2.35 69 XMSexyCombo_05 7993 2.86 4.84 1.97 70 TR_XM_BayesRelay 7816 1.47 4.74 0.00 71 XM_B_Phish_Phrases 7774 3.81 4.71 3.41 72 XM_B_Investor 7044 2.39 4.27 1.55 73 TM2_M_URI_OPT_OUT 6917 2.60 4.19 1.89 74 XM_H_GMP 6744 5.39 4.09 5.98 75 TR_XM_PhishingBody 6556 2.52 3.97 1.87 76 XM_SPF_SoftFail 6550 3.25 3.97 2.92 77 TR_XM_SpammyWords5 6464 1.93 3.92 1.03 78 HTML_IMAGE_RATIO_06 6460 3.16 3.91 2.83 79 MIME_HTML_MOSTLY 6384 2.66 3.87 2.11 80 T_XMDrugObfuBody_14 6276 2.48 3.80 1.89 81 MIME_HTML_ONLY_MULTI 6232 2.66 3.78 2.16 82 XMNumbers 6220 2.83 3.77 2.41 83 FONT_INVIS_LONG_LINE 6002 1.17 3.64 0.06 84 XM_B_SpammyTLD 5940 2.88 3.60 2.55 85 XMStrtUSub 5836 3.88 3.54 4.04 86 T_XMDrugObfuBody_08 5705 2.15 3.46 1.57 87 MIME_QP_LONG_LINE 5314 4.86 3.22 5.60 88 TR_XM_FormFill 5183 0.98 3.14 0.00 89 TM2_M_VERY_LONG_WORD 5007 1.84 3.03 1.30 90 XM_CamelCaseFrm001 4889 2.66 2.96 2.53 91 RCVD_IN_VALIDITY_SAFE 4625 3.77 2.80 4.20 92 HTML_IMAGE_RATIO_08 4471 2.36 2.71 2.21 93 XM_URI_RBL 4463 0.96 2.70 0.17 94 RELAYCOUNTRY_AU 4338 1.33 2.63 0.74 95 SpammyFromTLD_01 4314 1.28 2.61 0.68 96 XM_UB50 4298 1.35 2.60 0.79 97 TR_LOTS_OF_MONEY3 4288 1.09 2.60 0.42 98 XMDiploma_00 4287 1.92 2.60 1.61 99 TR_Mismatch_TLD_02 3932 0.81 2.38 0.10 100 XM_B_Unsub2 3842 1.82 2.33 1.58 101 XM_B_SpammyWords4 3702 1.03 2.24 0.48 102 RCVD_IN_VALIDITY_CERTIFIED 3610 3.22 2.19 3.69 103 USER_IN_DEF_DKIM_WL 3484 8.84 2.11 11.87 104 XM_DK_Undo_01 3470 1.87 2.10 1.76 105 URI_HEX 3455 1.49 2.09 1.22 106 XMStockSpam_06 3433 1.51 2.08 1.25 107 T_TooManySym_01 3380 3.95 2.05 4.80 108 SUBJ_ALL_CAPS 3235 1.48 1.96 1.26 109 HK_RANDOM_REPLYTO 3198 0.66 1.94 0.08 110 T_REMOTE_IMAGE 2960 2.91 1.79 3.41 111 RCVD_IN_IADB_LISTED 2947 3.90 1.79 4.85 112 SpammyFromTLD_02 2930 0.86 1.78 0.45 113 FROM_EXCESS_BASE64 2869 1.78 1.74 1.80 114 TR_XM_NoHeaderRelay 2817 0.60 1.71 0.10 115 XM_DIRTYINTL 2793 0.67 1.69 0.21 116 HTTPS_HTTP_MISMATCH 2710 1.12 1.64 0.89 117 HTML_TAG_BALANCE_BODY 2688 0.85 1.63 0.51 118 XM_SendGrid 2688 1.44 1.63 1.36 119 T_XMHurry_00 2669 0.87 1.62 0.53 120 RCVD_IN_IADB_SPF 2640 3.48 1.60 4.33 121 MAILING_LIST_MULTI 2601 2.16 1.58 2.43 122 TR_XM_INV_DKIM 2589 0.53 1.57 0.06 123 XMReplyNow 2565 0.61 1.55 0.18 124 TR_XM_PHPForged 2552 0.75 1.55 0.39 125 URI_TRY_3LD 2522 0.92 1.53 0.64 126 TR_XM_PHPDW 2503 0.73 1.52 0.37 127 RCVD_IN_IADB_DK 2492 3.11 1.51 3.82 128 RCVD_IN_IADB_SENDERID 2476 3.17 1.50 3.92 129 HTML_MIME_NO_HTML_TAG 2458 1.82 1.49 1.98 130 TR_XM_FormFill2 2449 0.71 1.48 0.36 131 ANY_BOUNCE_MESSAGE 2438 3.46 1.48 4.35 132 BOUNCE_MESSAGE 2438 3.46 1.48 4.35 133 XM_H_PHPOS 2426 0.70 1.47 0.35 134 XM_H_Long_From02 2379 1.07 1.44 0.91 135 XMPhish30 2342 1.07 1.42 0.91 136 XMGenDplmaNmb 2319 1.10 1.41 0.96 137 XM_HighProb1 2299 0.43 1.39 0.00 138 BAYES_40 2275 3.81 1.38 4.90 139 AC_BR_BONANZA 2233 0.47 1.35 0.07 140 XMBrknScrpt_02 2186 0.76 1.32 0.50 141 XMBdyGiftCard01 2138 0.74 1.30 0.50 142 T_XMDrugObfuBody_00 2088 0.92 1.27 0.77 143 ALL_TRUSTED 2045 12.67 1.24 17.80 144 T_XMDrugObfuBody_10 2020 0.40 1.22 0.03 145 KHOP_HELO_FCRDNS 1981 1.13 1.20 1.10 146 XMHTML_After_End 1747 0.80 1.06 0.68 147 TM2_M_A_HREF_HREF 1664 0.46 1.01 0.22 148 TR_Symld_Words 1643 1.33 1.00 1.48 149 RDNS_DYNAMIC 1620 0.52 0.98 0.32 150 TR_XM_DK_SendGrid 1611 0.89 0.98 0.85 151 REMOVE_BEFORE_LINK 1601 0.45 0.97 0.22 152 BAYES_20 1577 2.60 0.96 3.33 153 TR_XM_InvalidRelay 1568 0.31 0.95 0.02 154 TooManyTo_002 1560 2.38 0.95 3.03 155 HTML_FONT_FACE_BAD 1552 0.56 0.94 0.38 156 PLING_QUERY 1544 0.59 0.94 0.43 157 URIBL_DBL_SPAM 1540 0.29 0.93 0.00 158 XM_B_Phish66 1538 0.47 0.93 0.26 159 DKIM_ADSP_CUSTOM_MED 1537 0.89 0.93 0.88 160 XM_OfRef7 1522 0.46 0.92 0.25 161 XM_UB60 1515 0.32 0.92 0.06 162 XM_B_COPY_HTML 1511 0.72 0.92 0.63 163 XMSubMetaI_00 1511 0.75 0.92 0.68 164 XM_H_Undi_Recip 1503 0.42 0.91 0.19 165 XMPhish14 1503 0.51 0.91 0.33 166 XM_UB99 1500 0.28 0.91 0.00 167 TR_MetaPhish_Combo_01 1496 0.91 0.91 0.92 168 XM_B_DNDMA 1494 0.64 0.91 0.51 169 URI_NOVOWEL 1482 1.62 0.90 1.94 170 DIET_1 1474 0.44 0.89 0.23 171 BOTNET_NORDNS 1462 0.28 0.89 0.01 172 TR_XM_Base64_M1 1448 0.85 0.88 0.84 173 TooManyTo_003 1446 1.22 0.88 1.37 174 XM_B_COVIDMETA 1444 0.45 0.87 0.26 175 XMBody_78 1433 0.54 0.87 0.40 176 PDS_OTHER_BAD_TLD 1432 0.34 0.87 0.10 177 XM_ProductURIs 1422 0.77 0.86 0.73 178 RCVD_IN_VALIDITY_RPBL 1418 0.30 0.86 0.04 179 SHOPIFY_IMG_NOT_RCVD_SFY 1393 0.42 0.84 0.23 180 TooManyTo_004 1361 0.92 0.82 0.96 181 FORGED_GMAIL_RCVD 1359 0.65 0.82 0.58 182 XM_B_SEO 1357 0.34 0.82 0.12 183 TR_Mismatch_TLD_01 1312 0.47 0.79 0.32 184 RCVD_IN_IADB_VOUCHED 1306 2.18 0.79 2.80 185 TooManyTo_005 1306 0.79 0.79 0.79 186 XM_Combo_Sbj 1286 0.34 0.78 0.14 187 XMSexyCombo_01 1278 0.35 0.77 0.16 188 SUBJ_DOLLARS 1250 0.45 0.76 0.31 189 RCVD_IN_PSBL 1236 0.42 0.75 0.28 190 MPART_ALT_DIFF_COUNT 1231 0.60 0.75 0.53 191 SCC_BODY_URI_ONLY 1222 1.99 0.74 2.56 192 THIS_AD 1217 0.38 0.74 0.22 193 TR_Caps_n_Bayes_99 1216 0.24 0.74 0.02 194 TVD_RCVD_IP 1210 1.17 0.73 1.36 195 T_Symld_Words_02 1199 0.59 0.73 0.52 196 T_TooManySym_02 1166 1.80 0.71 2.29 197 XMMoneyMeta_00 1162 0.58 0.70 0.52 198 LongTLD 1153 0.44 0.70 0.33 199 RELAYCOUNTRY_FR 1148 0.36 0.70 0.21 200 HELO_DYNAMIC_SPLIT_IP 1144 0.22 0.69 0.01 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 316735 89.62 97.13 86.24 2 T_SCC_BODY_TEXT_LINE 306345 82.83 81.53 83.41 3 RELAYCOUNTRY_US 290997 78.73 77.60 79.23 4 DKIM_SIGNED 266917 78.51 91.48 72.68 5 XM_DK_Pass 261780 76.52 88.19 71.28 6 DKIM_VALID 258288 75.38 86.62 70.33 7 XM_B_Unicode 258239 75.22 86.12 70.31 8 DCC_CHECK_NEGATIVE 247587 54.99 27.36 67.41 9 BAYES_50 222749 53.57 37.82 60.65 10 DKIM_VALID_AU 206048 58.07 62.44 56.10 11 XMListUnsubscribeExists 182019 57.05 73.71 49.56 12 XM_B_SpammyWords 165110 53.75 73.33 44.96 13 XM_B_Unicode3 145681 42.07 47.40 39.67 14 DCC_CHECK 119507 44.97 72.63 32.54 15 T_TM2_M_HEADER_IN_MSG 106416 26.98 22.54 28.98 16 DKIM_VALID_EF 99562 29.05 33.38 27.11 17 HTML_FONT_LOW_CONTRAST 99362 30.07 36.79 27.05 18 FVGT_m_MULTI_ODD 93500 27.55 32.20 25.46 19 LOC_TINY_FONT_1 90984 29.65 40.51 24.77 20 RCVD_IN_MSPIKE_H2 82989 23.19 24.52 22.60 21 XMSubLong 81508 22.37 22.77 22.19 22 T_KAM_HTML_FONT_INVALID 74865 23.75 31.23 20.38 23 MIME_HTML_ONLY 73196 24.42 34.42 19.93 24 XM_B_SpammyWords2 72440 26.87 42.76 19.72 25 ALL_TRUSTED 65386 12.67 1.24 17.80 26 XM_Multi_Part_URI 48698 14.90 18.55 13.26 27 TR_XM_DK_Unsub 47956 16.91 25.49 13.06 28 USER_IN_DEF_DKIM_WL 43589 8.84 2.11 11.87 29 UNPARSEABLE_RELAY 35477 11.17 14.53 9.66 30 BAYES_60 34103 8.87 7.94 9.29 31 BAYES_00 33266 6.46 0.68 9.06 32 TooManyTo_001 32822 7.81 5.31 8.94 33 LotsOfNums_01 31904 8.09 6.76 8.69 34 LOTS_OF_MONEY 29507 9.61 13.11 8.03 35 XM_DKIMWhitelistDomains 29335 5.52 0.02 7.99 36 XM_B_Unsub 29195 10.16 15.07 7.95 37 XM_Evil_Numbers_Gen 26895 8.02 9.58 7.32 38 IN_ZIMBRA_NJ_WHITELIST 23902 4.52 0.10 6.51 39 TR_XM_DK_Bayes 23875 4.65 0.54 6.50 40 TR_XM_DK_Bayes1 23559 4.59 0.54 6.41 41 TR_XM_BayesUnsub 23106 8.86 14.58 6.29 42 TR_XM_SpammyWords4 22417 7.80 11.57 6.10 43 RCVD_IN_MSPIKE_WL 22328 7.80 11.64 6.08 44 RCVD_IN_MSPIKE_H3 22328 7.80 11.64 6.08 45 XM_H_GMP 21965 5.39 4.09 5.98 46 TR_MAX_INTL_RELAY 21494 17.08 42.07 5.85 47 MIME_QP_LONG_LINE 20577 4.86 3.22 5.60 48 TR_XM_DK_Bayes2 20338 3.96 0.45 5.54 49 XM_H_Long_From01 18996 5.18 5.21 5.17 50 HTML_IMAGE_RATIO_02 18187 5.49 6.69 4.95 51 BAYES_40 17991 3.81 1.38 4.90 52 XM_DK_Undo_02 17850 17.81 46.62 4.86 53 RCVD_IN_IADB_LISTED 17799 3.90 1.79 4.85 54 T_TooManySym_01 17638 3.95 2.05 4.80 55 BAYES_80 16018 5.73 8.79 4.36 56 ANY_BOUNCE_MESSAGE 15968 3.46 1.48 4.35 57 BOUNCE_MESSAGE 15967 3.46 1.48 4.35 58 RCVD_IN_IADB_SPF 15908 3.48 1.60 4.33 59 RCVD_IN_VALIDITY_SAFE 15442 3.77 2.80 4.20 60 XM_PDF 15218 2.99 0.44 4.14 61 BOTNET_IPINHOSTNAME 15023 7.10 13.81 4.09 62 XM_Body_Dirty_Words 15006 5.69 9.26 4.09 63 XMStrtUSub 14830 3.88 3.54 4.04 64 MPART_ALT_DIFF 14492 4.55 5.88 3.95 65 XM_B_SpammyWords3 14457 6.88 13.43 3.94 66 RCVD_IN_IADB_SENDERID 14380 3.17 1.50 3.92 67 HTML_IMAGE_RATIO_04 14302 4.45 5.68 3.89 68 RCVD_IN_IADB_DK 14041 3.11 1.51 3.82 69 RELAYCOUNTRY_META 13790 9.59 22.57 3.75 70 BAYES_99 13744 13.62 35.61 3.74 71 RCVD_IN_VALIDITY_CERTIFIED 13545 3.22 2.19 3.69 72 XM_UncommonTLD01 13251 4.50 6.49 3.61 73 T_REMOTE_IMAGE 12538 2.91 1.79 3.41 74 XM_B_Phish_Phrases 12506 3.81 4.71 3.41 75 XMSubMetaSx_00 12295 4.11 5.81 3.35 76 BAYES_20 12241 2.60 0.96 3.33 77 TooManyTo_002 11132 2.38 0.95 3.03 78 XM_SPF_SoftFail 10742 3.25 3.97 2.92 79 BAYES_999 10625 10.51 27.46 2.89 80 FSL_BULK_SIG 10403 4.61 8.55 2.83 81 HTML_IMAGE_RATIO_06 10380 3.16 3.91 2.83 82 RCVD_IN_IADB_VOUCHED 10292 2.18 0.79 2.80 83 BAYES_05 9430 1.94 0.54 2.57 84 SCC_BODY_URI_ONLY 9393 1.99 0.74 2.56 85 XM_B_SpammyTLD 9378 2.88 3.60 2.55 86 XM_CamelCaseFrm001 9279 2.66 2.96 2.53 87 MAILING_LIST_MULTI 8909 2.16 1.58 2.43 88 XMNumbers 8860 2.83 3.77 2.41 89 DKIM_INVALID 8629 3.13 4.86 2.35 90 T_TooManySym_02 8405 1.80 0.71 2.29 91 HTML_IMAGE_RATIO_08 8109 2.36 2.71 2.21 92 MIME_HTML_ONLY_MULTI 7931 2.66 3.78 2.16 93 TR_XM_SpammyRelay 7900 7.41 19.10 2.15 94 MIME_HTML_MOSTLY 7753 2.66 3.87 2.11 95 BAYES_95 7719 3.40 6.29 2.10 96 HTML_MIME_NO_HTML_TAG 7256 1.82 1.49 1.98 97 XMSexyCombo_05 7243 2.86 4.84 1.97 98 TR_XM_DKIM_Undo 7154 12.57 36.21 1.95 99 URI_NOVOWEL 7137 1.62 0.90 1.94 100 INVALID_MSGID 7047 1.37 0.16 1.92 101 RCVD_IN_IADB_OPTIN 6947 1.46 0.49 1.89 102 T_XMDrugObfuBody_14 6937 2.48 3.80 1.89 103 TM2_M_URI_OPT_OUT 6933 2.60 4.19 1.89 104 TR_XM_PhishingBody 6866 2.52 3.97 1.87 105 FROM_EXCESS_BASE64 6626 1.78 1.74 1.80 106 TO_MALFORMED 6466 1.26 0.14 1.76 107 XM_DK_Undo_01 6462 1.87 2.10 1.76 108 HELO_NODOT 6272 1.23 0.16 1.71 109 HELO_NO_DOMAIN 6264 1.23 0.16 1.71 110 XMDiploma_00 5916 1.92 2.60 1.61 111 XM_B_Unsub2 5821 1.82 2.33 1.58 112 T_XMDrugObfuBody_08 5765 2.15 3.46 1.57 113 XM_B_Investor 5678 2.39 4.27 1.55 114 TR_Symld_Words 5432 1.33 1.00 1.48 115 XM_OfRef6 5271 2.51 4.91 1.44 116 IN_HORDE_ADDRESS_BOOK 5192 1.01 0.10 1.41 117 TR_XM_UnparsRelay 5131 3.32 7.59 1.40 118 TooManyTo_003 5042 1.22 0.88 1.37 119 TVD_RCVD_IP 5011 1.17 0.73 1.36 120 XMGappySubj_01 4993 0.99 0.16 1.36 121 XM_SendGrid 4988 1.44 1.63 1.36 122 UNTRUSTED_Relay 4831 2.61 5.49 1.32 123 TM2_M_VERY_LONG_WORD 4762 1.84 3.03 1.30 124 SUBJ_ALL_CAPS 4621 1.48 1.96 1.26 125 XMStockSpam_06 4603 1.51 2.08 1.25 126 BOTNET 4600 3.61 8.86 1.25 127 URI_HEX 4489 1.49 2.09 1.22 128 XM_GoogleGroups 4249 0.96 0.52 1.16 129 XMBody_95 4158 0.86 0.25 1.13 130 XMBSHREFv2 4056 0.92 0.50 1.10 131 KHOP_HELO_FCRDNS 4049 1.13 1.20 1.10 132 TR_DCC_Bayes_99 3992 8.38 24.60 1.09 133 XM_B_FormFill 3951 0.76 0.06 1.08 134 RELAYCOUNTRY_CA 3911 5.06 13.96 1.06 135 TVD_SPACE_RATIO 3902 0.78 0.14 1.06 136 TR_XM_SpammyWords5 3792 1.93 3.92 1.03 137 XMCapTrack 3649 0.79 0.34 0.99 138 XMGenDplmaNmb 3526 1.10 1.41 0.96 139 TooManyTo_004 3525 0.92 0.82 0.96 140 TR_MetaPhish_Combo_01 3363 0.91 0.91 0.92 141 XM_H_Long_From02 3331 1.07 1.44 0.91 142 XMPhish30 3330 1.07 1.42 0.91 143 HTML_TAG_BALANCE_HEAD 3284 0.68 0.20 0.89 144 HTTPS_HTTP_MISMATCH 3270 1.12 1.64 0.89 145 DKIM_ADSP_CUSTOM_MED 3227 0.89 0.93 0.88 146 T_FILL_THIS_FORM_SHORT 3146 2.13 4.96 0.86 147 TR_XM_DK_SendGrid 3125 0.89 0.98 0.85 148 TR_XM_Base64_M1 3080 0.85 0.88 0.84 149 RCVD_IN_RP_SAFE 3060 0.74 0.53 0.83 150 T_TooManySym_03 3048 0.65 0.24 0.83 151 XMGappySubj_02 2929 0.58 0.11 0.80 152 TooManyTo_005 2914 0.79 0.79 0.79 153 XM_UB50 2891 1.35 2.60 0.79 154 XM_H_PHPMailer 2869 0.74 0.66 0.78 155 T_XMDrugObfuBody_00 2833 0.92 1.27 0.77 156 RELAYCOUNTRY_AU 2720 1.33 2.63 0.74 157 RCVD_IN_RP_CERTIFIED 2683 0.64 0.43 0.73 158 XM_ProductURIs 2668 0.77 0.86 0.73 159 XM_H_Trusted_IP 2532 0.48 0.00 0.69 160 RCVD_IN_BL_SPAMCOP_NET 2497 5.19 15.23 0.68 161 FROM_GOV_DKIM_AU 2494 0.55 0.25 0.68 162 XMHTML_After_End 2489 0.80 1.06 0.68 163 SpammyFromTLD_01 2488 1.28 2.61 0.68 164 XMSubMetaI_00 2480 0.75 0.92 0.68 165 MSGID_NOFQDN1 2370 0.45 0.01 0.65 166 URI_TRY_3LD 2366 0.92 1.53 0.64 167 XM_B_COPY_HTML 2307 0.72 0.92 0.63 168 XMNoVowels 2286 0.57 0.47 0.62 169 FILL_THIS_FORM 2280 0.56 0.42 0.62 170 XMSubNoVowel 2249 0.52 0.32 0.61 171 T_OBFU_PDF_ATTACH 2200 0.43 0.07 0.60 172 FORGED_GMAIL_RCVD 2113 0.65 0.82 0.58 173 USER_IN_WHITELIST 2111 0.40 0.00 0.57 174 USER_IN_WELCOMELIST 2111 0.40 0.00 0.57 175 XM_ShortIntro_01 2097 0.53 0.42 0.57 176 NML_ADSP_CUSTOM_MED 2058 0.60 0.68 0.56 177 SHORT_HELO_AND_INLINE_IMAGE 1964 0.38 0.05 0.53 178 T_XMHurry_00 1964 0.87 1.62 0.53 179 MPART_ALT_DIFF_COUNT 1938 0.60 0.75 0.53 180 T_Symld_Words_02 1920 0.59 0.73 0.52 181 XMMoneyMeta_00 1904 0.58 0.70 0.52 182 XM_B_DNDMA 1889 0.64 0.91 0.51 183 XMOemUri 1875 0.43 0.24 0.51 184 HTML_TAG_BALANCE_BODY 1855 0.85 1.63 0.51 185 XMBrknScrpt_02 1849 0.76 1.32 0.50 186 TR_MetaPhish_Combo_01b 1836 0.36 0.06 0.50 187 RELAYCOUNTRY_GB 1836 0.54 0.61 0.50 188 XMBdyGiftCard01 1826 0.74 1.30 0.50 189 XMBody_17 1796 2.44 6.77 0.49 190 XM_B_SpammyWords4 1764 1.03 2.24 0.48 191 HTML_IMAGE_ONLY_28 1689 0.39 0.24 0.46 192 SpammyFromTLD_02 1666 0.86 1.78 0.45 193 MSGID_FROM_MTA_HEADER 1600 0.33 0.08 0.44 194 PLING_QUERY 1580 0.59 0.94 0.43 195 TR_LOTS_OF_MONEY3 1534 1.09 2.60 0.42 196 XMDateMe_00 1516 0.36 0.23 0.41 197 TO_NO_BRKTS_HTML_ONLY 1493 0.33 0.15 0.41 198 XMBody_78 1467 0.54 0.87 0.40 199 HTML_IMAGE_ONLY_20 1432 0.41 0.44 0.39 200 TR_XM_PHPForged 1418 0.75 1.55 0.39 ----------------------------------------------------------------------